Theme Check2

== Description ==

Theme Check2 is a modern theme auditing plugin for WordPress themes.

It is designed more like an audit suite than the legacy Theme Check model:

• Structured categories
• Severity-based results
• Static and runtime signals
• Admin UI filters
• JSON export
• WP-CLI integration

Current check categories include:

• General
• Theme Repo
• Security
• Performance
• Accessibility

Current capabilities include:

• Static file collection for PHP, CSS, JS, JSON, block templates, and other assets
• Runtime asset probe for the active theme
• General metadata checks for style.css, theme.json, functions.php, screenshots, and text domain consistency
• Theme repo checks for submission-oriented metadata, screenshot requirements, and Theme URI policy
• Security heuristics for output escaping and input sanitization using token-based PHP analysis
• Performance checks for remote assets, duplicate assets, large files, theme asset size, enqueue scope, footer loading, and CDN references
• Accessibility checks such as .screen-reader-text support and accessibility-ready tag signaling

Theme Check2 currently exposes:

• Admin screen under Tools > Theme Check2
• Filterable scan results by severity and category
• JSON export of the current filtered report
• WP-CLI command: wp theme-check2 run <theme-slug>

Example WP-CLI usage: wp theme-check2 run twentytwentyfive wp theme-check2 run twentytwentyfive --format=json wp theme-check2 run twentytwentyfive --severity=warning --category=security

== Important Notes ==

• Runtime checks only run against the currently active theme.
• Security findings are heuristics and should be reviewed by a developer before being treated as definitive vulnerabilities.
• Theme Repo checks are intentionally separated from general engineering checks so commercial or internal themes can still use the plugin with less policy noise.

== Installation ==

1. Upload the plugin to /wp-content/plugins/theme-check2/
2. Activate the plugin through the WordPress admin
3. Open Tools > Theme Check2
4. Select a theme and run a scan

== Frequently Asked Questions ==

= Is this a replacement for the legacy Theme Check plugin? = Not exactly. Theme Check2 is built as a modern audit-oriented checker with structured results, runtime probes, and export/CLI workflows. It can overlap with legacy Theme Check in some areas, but it is not a line-by-line clone.

= Does it support WordPress.org theme review checks? = Partially. Theme Repo checks exist as their own category, but the plugin is not yet a full mirror of every historical WordPress.org review rule.

= Can it scan inactive themes? = Yes for static checks. Runtime checks are only available for the active theme.

= Can I automate scans? = Yes. Use the WP-CLI command or export JSON from the admin page.